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Amendments to the Specification : 

Please replace the paragraph beginning at page 2, line 12, 
with the following amended paragraph: 

FIG . — 4 io FIGS. 4A and 4B are a flow chart of a process for 
dynamically generating and transmitting a mobile IP key. 

Please replace the paragraph beginning at page 10, line 14, 
with the following amended paragraph: 

Referring to FIG . — 4 FIGS. 4A and 4B , after the mobile node 
14 receives credentials for its home agent, it may move off of 
its home network 10. When the mobile needs to register with 
its home agent, it generates 200 a Registration Request message 
that includes its care-of address. The mobile node also 
generates 2 02 a Kerberos Application Request message, which 
includes (1) an authenticator message (e.g., a timestamp) 
encrypted with the MN-HA session key and (2) the ticket for the 
home agent. The mobile node embeds 204 the Kerberos Application 
Request within a key extension of the Registration Request 
message. The key extension is a variable bit extension included 
within a Registration Request message for negotiation of a key 
between a mobile node and a home or foreign agent. Mobile IP 
Working Group, Generalized Key Distribution Extensions for 
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Mobile IP, Internet Draft, 14 July 2000, describes examples of 
key extensions that may be included in a Registration Request or 
Registration Reply message. 

Please replace the paragraph beginning at page 15, line 3, 
with the following amended paragraph: 

Other embodiments are within the scope of the following 
claims. For example, a mobile IP session key may be refreshed 
at ' any time by repeating the processes described in FIGS . — 2— 4r 
FIGS. 2-4B , except that the Kerberos Authentication Service 
Request and Reply messages and the Kerberos Ticket Granting 
Service Request and Reply messages (shown in FIG. 2) will be 
routed through the home agent. Additionally, a mobile node and 
home agent may exchange registration request and reply messages 
when the mobile node contacts the home agent directly over a 
wireless network. Finally, application of the concepts of this 
description are not limited to use of the Kerberos 
Authentication protocol, but other authentication techniques may 
be employed to authenticate a remote mobile node. 
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